Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier: OcTaTaZla4Lfhg9TFIppItmj1f2eZm2Pgv8CYXJN+y8=
Subject key identifier: B2:27:57:4B:33:51:D7:16:9C:DC:6A:81:A9:01:76:C5:ED:18:58:4C
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer: /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial: 0194BBCDC5EBC011E521412F6EB4F6D39019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number: 0AEA
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: YU3mJZy2w8u6AIN+D0y9ZH07iHZZWLfs8Xm+KpPmPj4=)
2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c5:eb:c0:11:e5:21:41:2f:6e:b4:f6:d3:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=b227574b3351d7169cdc6a81a90176c5ed18584c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:5d:26:c8:6c:1c:ab:74:1d:78:6e:01:68:
a7:a7:9f:11:17:88:b1:b0:e7:10:ae:ce:a6:32:82:
48:06:4a:39:7b:ac:83:0a:aa:a7:b4:d9:77:83:45:
64:6b:76:4e:ee:f2:58:ba:eb:0a:92:88:ee:2b:fa:
ea:bb:f5:1e:17:63:7a:f9:6c:a4:d5:bb:4c:08:2a:
ab:bb:4c:27:e8:44:ab:27:2c:7f:27:b8:de:24:50:
e4:98:59:4c:a1:c8:72:0c:97:2c:40:02:dd:04:57:
a0:45:36:86:f9:36:16:83:51:b2:48:ef:cb:86:85:
fe:d4:0f:6b:bb:62:06:4f:5e:e3:56:79:34:ca:97:
04:64:ec:a1:24:b9:b0:53:06:6f:da:3e:10:f7:8e:
da:ce:7f:db:d6:47:f0:d0:aa:58:57:23:fd:6c:ad:
85:a1:aa:21:38:f0:99:7c:e1:d2:98:d9:fb:63:63:
07:f6:f4:70:55:d5:17:af:0c:7a:c3:d2:22:53:24:
94:4a:2f:db:c8:1c:ba:47:9d:ea:68:c3:5b:8b:0a:
3a:95:16:32:c6:4d:cd:cd:0a:42:96:c8:da:91:bc:
ca:af:f1:e0:2e:28:39:9b:03:8f:55:2c:c5:28:58:
62:0c:39:e4:ba:58:06:6c:2b:24:93:27:c7:1c:60:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:57:4B:33:51:D7:16:9C:DC:6A:81:A9:01:76:C5:ED:18:58:4C
X509v3 Authority Key Identifier:
keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:ee:26:02:16:59:14:dc:14:99:e3:37:bd:fd:3a:12:9b:
39:93:89:29:83:dc:ec:dc:c6:5f:d1:4d:49:46:29:d6:03:27:
9f:63:50:41:64:34:de:a1:40:9d:2d:c3:07:df:9f:56:53:25:
20:fc:8c:16:92:ce:ef:f4:51:fa:a4:23:d2:f8:c7:43:d1:f4:
3a:6c:0d:62:ac:9e:eb:65:b2:a6:5d:99:77:f8:8d:05:02:d4:
67:e6:f5:71:05:f1:ff:73:de:2d:48:1f:98:61:14:cb:c5:2f:
60:6b:22:f3:1e:09:07:db:d2:06:c8:fe:45:fc:86:59:f6:4d:
1b:31:54:c6:42:39:da:17:c3:6d:5a:f1:c0:0c:3c:c3:9e:47:
2d:bc:75:5b:9c:5b:1c:20:c4:e4:a9:15:e3:f1:f9:2a:6a:7b:
80:86:7a:09:d2:eb:c4:29:29:d9:a3:18:29:bf:6b:5b:ca:c8:
17:4d:ae:c9:02:ac:da:7f:b2:6c:0e:bb:e3:b6:9c:7e:71:02:
f6:e3:f2:0a:93:9d:c6:74:54:73:80:ce:7d:aa:37:ac:a4:d2:
cd:17:5d:5d:10:74:b6:ff:fa:c0:b9:12:cf:2e:7b:b8:dc:c0:
72:aa:f5:48:10:76:7a:f7:35:09:74:97:43:55:2a:19:ab:31:
4a:4f:48:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:07 2025 by rpki-client